Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-dIfQtOtohFcBTjyww529iSVNfM.roa
File: -dIfQtOtohFcBTjyww529iSVNfM.roa (raw, json)
Hash identifier: xcCQ+QcSJkbrQvwzVG6SrMv4AgnO0g5SqnSO2/hgqHE=
Subject key identifier: F9:D2:1F:42:D3:AD:A2:11:5C:05:38:F2:C3:0E:76:F6:24:95:35:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23FD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-dIfQtOtohFcBTjyww529iSVNfM.roa
Signing time: Tue 24 Jun 2025 13:12:10 +0000
ROA not before: Tue 24 Jun 2025 13:12:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9213 (0x23fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 13:12:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F9D21F42D3ADA2115C0538F2C30E76F6249535F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:34:94:aa:69:59:25:07:4b:e7:b9:71:dd:
1d:12:42:19:e1:11:cf:d2:c7:27:e1:3b:da:9c:fb:
a4:f0:3b:1c:4e:ae:52:ec:54:30:97:05:3f:e9:cd:
7e:20:dc:d6:6e:26:05:8f:3a:66:2f:e1:df:2f:27:
98:3c:e9:ae:1a:80:53:55:3b:02:ec:60:36:52:ed:
b7:53:0f:d7:7b:7a:e0:5a:c3:fb:71:8d:e6:a3:38:
7c:e3:ae:a2:27:81:1c:75:76:b7:1c:8c:4f:c9:6a:
2b:2e:67:48:b5:8c:aa:3f:8a:cf:35:08:84:03:86:
c6:d9:2f:3f:d6:eb:82:04:be:36:aa:26:e0:ce:42:
27:26:c7:31:69:71:1b:d7:71:92:c6:85:aa:5b:cc:
e2:b6:81:22:72:13:4d:2e:5e:01:df:15:51:b2:6d:
05:b9:99:ef:a6:3d:84:7a:78:e6:f7:5d:ea:d1:fa:
8e:d6:25:09:45:66:4f:13:75:bc:76:07:c1:1a:f4:
7b:46:d7:fe:25:91:c5:2e:2a:28:a8:a5:f7:c3:4b:
45:21:7d:37:61:6f:83:9e:c0:db:71:a8:2a:a0:53:
9b:ed:e6:3b:0f:f7:90:1d:c0:bc:c8:88:df:65:38:
34:ab:66:a3:31:ad:80:4e:ac:e1:9b:e1:7d:79:9c:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:1F:42:D3:AD:A2:11:5C:05:38:F2:C3:0E:76:F6:24:95:35:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-dIfQtOtohFcBTjyww529iSVNfM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:81:a7:a4:88:a7:f2:6b:e0:dd:04:b3:35:13:b3:c6:f9:de:
85:9a:de:a8:04:b8:53:52:b2:9d:62:ef:a1:c3:f5:af:f9:46:
fd:0f:98:c0:20:2b:69:a4:ab:af:b7:97:30:a8:6e:6b:6e:5d:
84:d6:fc:2b:9b:8a:28:ab:99:5d:18:e6:8b:b7:12:0e:2b:5f:
fd:fd:1a:dd:de:5f:b8:8f:90:2f:8d:2b:8e:be:bb:b3:f0:1d:
df:37:e1:bb:25:46:d6:f8:77:98:9d:24:fa:1d:c6:d2:25:0c:
62:a2:f6:bb:3b:2d:b0:80:4a:0d:f5:9d:56:e5:07:34:13:88:
81:99:9b:c3:31:f9:d6:52:dc:db:61:60:35:07:c6:56:e9:9a:
d5:b2:39:12:26:1e:af:82:32:6e:14:56:73:26:28:db:fa:0e:
81:e3:d6:84:e6:eb:f3:17:f1:23:88:e7:10:41:c7:16:25:e5:
52:b5:2a:5f:80:49:3f:9e:48:b6:9f:5e:db:74:e2:f4:4f:72:
0e:8b:d5:65:e6:11:26:fe:73:33:3f:48:a6:e3:14:cb:9d:a8:
f5:6e:5f:c4:80:aa:66:de:e3:a2:7f:a9:40:10:59:b4:16:9a:
8b:d4:49:ba:2e:55:55:ef:fc:39:80:ad:b1:06:bc:68:fc:64:
9b:84:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:17:49 2025 by rpki-client